. WHAT IS CLAIMED IS: 



1 1. A method of recovering from malfunctions in a first 

2 agent module that is installed in a modular network 

3 device having a plurality of network interface modules 

4 housed in a chassis where the first agent module performs 

5 management and system controller functions, the method 

6 comprising the steps of: 

7 installing a second agent module in the chassis and 

8 asserting a present signal of the second agent to notify 

9 the first agent module that the second agent module is 
Q 10 present; 

^; 11 determining, at the second agent module, if the first 

g 12 agent module is installed when a present signal, a ready 
\|M3 signal and a privilege signal of the first agent module 
M 14 ^3^3 asserted; 

Cil 15 synchronizing configuration information of the network 

HI 

^ 16 interface modules from the first agent module to the 
^ 17 second agent module after a ready signal of the second 
HI 18 agent module is asserted; 

periodically sending a message, from the first agent 
module to the second agent module, indicating that the 
first agent module has not failed; 

detecting, at the second agent module, that the 
malfunctions in the first agent module occur if the 
second agent module cannot receive the message within a 
25 predetermined time interval; 

rebooting the modular network device including the 
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27 first agent module and the second agent module; and 
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performing the management and system controller 
functions by the second agent module using the 
synchronized configuration information. 

2. The method as recited in claim 1 further comprising 
the step of : 

re -synchronizing the second agent module to the first 
agent module when any configuration information is 
modified on the first agent module. 

3 . The method as recited in claim 2 further comprising 
the steps of: 

asserting the ready signal of the second agent module 
after the rebooting step to indicate that the second 
agent module has completed an initialization process; and 

asserting a privilege signal of the second agent module 
to indicate that the second agent module has taken over 
the management and system controller functions previously 
performed by the first agent module. 

4. The method as recited in claim 3 further comprising 
the steps of: 

if the first agent module recovers to a normal 
operating condition after the rebooting step, performing 
the steps of : 

de -asserting the privilege signal of the first agent 
module; and 

determining, at the first agent module, if the second 
agent module has taken over the management and system 
controller functions when the present, ready and 



privilege signals of the second agent module are 
asserted. 

5. The method as recited in claim 1 wherein the 
synchronizing step comprises: 

transmitting a data packet having a header and data 
associated with the configuration information from the 
first agent module to the second agent module; 

acknowledging the data transmitting step by returning 
an answer packet from the second agent module to the 
first agent modules- 
receiving the answer packet at the first agent module; 
and 

repeating the transmitting, the replying and the 
receiving steps until all of the configuration 
information is completely transferred; 

wherein the header in the data packet comprises a field 
indicative of a packet transmission type; 

wherein the answer packet is the header having the 
field indicative of packet acknowledgement type. 

6. The method as recited in claim 1 wherein the second 
agent module is installed when the modular network device 
is powered on. 

7. The method as recited in claim 1 wherein the first 
agent and the second agent modules have substantially the 
same arrangement . 

8 . A method of establishing redundant management and 
system controller functions in a modular network device 
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3 , having a plurality of network interface modules housed in 

4 a chassis, comprising the steps of: 

5 booting the modular network device with a first agent 
module installed in a first slot of the chassis and a 

7 second agent module installed in a second slot of the 
8. chassis; 

determining if the first agent module is a primary 
agent module and the second agent module is a backup 
agent module when a privilege signal of the first agent 
module is asserted and a privilege signal of the second 
agent module is de-asserted; 
Q 14 synchronizing configuration information of the network 

H 15 interface modules from the first agent module to the 
16 second agent module after a ready signal of the first 
1^ 17 agent module and a ready signal of the second agent 
^ 18 module are both asserted; 

S 

|j 19 periodically sending a message, from the first agent 

20 module to the second agent module, indicating that the 

21 first agent module has not failed; 

p^l 22 detecting, at the second agent module, that the first 

23 agent module has failed if the second agent module cannot 
receive the message within a predetermined time interval; 

rebooting the modular network device including the 
first agent module and the second agent module; and 

performing the management and system controller 
functions by the second agent module using the 
synchronized configuration information. 
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1 9. The method as recited in claim 8 further comprising 

2 the steps of : 
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3 • respectively asserting, when the modular network device 

4 is powered up, a present signal of the first agent module 
5 

6 
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and a present signal of the second agent module to notify 
both agent modules that the first and the second agent 



7 modules are installed; 



8 asserting the privilege signal of the first agent 

9 module to indicate that the first agent module in the 
first slot serves as the primary agent module; 

detecting, at the second agent module, that the 
privilege signal of the first agent module is asserted; 
holding the privilege signal of the second agent module 
14 de -asserted; and 
Q 15 individually asserting the ready signal of the first 

agent module and the ready signal of the second agent 
module when the first and the second agent module 
Ci 18 respectively complete an initialization process. 

g 1 10. The method as recited in claim 9 further comprising 

2 the step of: 

3 re- synchronizing the second agent module to the first 

4 agent module when any configuration information is 

5 modified on the first agent module. 



1 11. The method as recited in claim 10 further 

2 comprising the steps of: 
asserting the ready signal of the second agent module 

after the rebooting step in order to indicate that the 
second agent module has completed the initialization 

6 process; and 

7 asserting the privilege signal of the second agent 
module to indicate that the second agent module has taken 
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9 • over the n\anagement and system controller functions 

10 previously performed by the first agent module. 

1 12 . The method as recited in claim 11 further 
■2 comprising the steps of: 

3 if the first agent module recovers to a normal 

4 operating condition after the rebooting step^ performing 

5 the steps of : 

6 de-asserting the privilege signal of the first agent 

7 module; and 

8 determining, at the first agent module, if the second 

9 agent module has taken over the management and system 

B 10 controller functions when the present, the ready and 

SI 

^El 11 the privilege signals of the second agent module are 

^12 asserted. 

!«^« 

PI 1 13 . The method as recited in claim 8 wherein the 

'fit 

2 synchronizing step comprises: 

J' 3 transmitting a data packet having a header and data 

pi 4 associated with the configuration information from the 

5 first agent module to the second agent module; 

6 acknowledging the data transmitting step by returning 

7 an answer packet from the second agent module to the 

8 first agent module; 

9 receiving the answer packet at the first agent module; 

10 and 

11 repeating the transmitting, the replying and the 

12 receiving steps until all of the configuration 

13 information is completely transferred; 

14 wherein the header in the data packet comprises a field 

15 indicative of a packet transmission type; 
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16 , wherein the answer packet is the header having the 

17 field indicative of packet acknowledgement type. 

1 14 . The method as recited in claim 8 wherein the first 

2 agent and the second agent modules have substantially the 

3 same arrangement . 
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